Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ALLE INFORMATION CO., LTD. Component: The School Manage System Clear all filters
TI-2020-08441 CVE-2020-10507 · GHSA-7225-46m6-6gr2

ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration

Priority MEDIUM 44

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting machine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01197 Published 2020-04-15 Fixed in 2020 CWE-434
TI-2020-08440 CVE-2020-10506 · GHSA-3mrr-qqw5-mqj9

ALLE INFORMATION CO., LTD. School Manage System - Path Traversal

Priority LOW 36

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01323 Published 2020-04-15 Fixed in 2020 CWE-22
TI-2020-08439 CVE-2020-10505 · GHSA-2vjr-cvf4-9474

ALLE INFORMATION CO., LTD. School Manage System - SQL Injection

Priority MEDIUM 44

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases schema and username/pass…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01065 Published 2020-04-15 Fixed in 2020 CWE-89